-
Notifications
You must be signed in to change notification settings - Fork 10
Kernel CVES Analysis Sept25 2025 | CVE-2025-39838,CVE-2025-39857, and… #61
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please make sure you read the template and the existing assessments so that they are all similarly formatted. In particular:
- check the expected values for the fields
- remove the semicolons at the end of the lines
- ensure YAML is properly formatted (you can run
yamllint
to verify that)
vulns/CVE-2025-39838.yml
Outdated
@@ -0,0 +1,7 @@ | |||
reachability: Local | |||
memory_corruption: Likely Null pointer can lead to Memory corruption ; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This should be a boolean field.
vulns/CVE-2025-39838.yml
Outdated
@@ -0,0 +1,7 @@ | |||
reachability: Local | |||
memory_corruption: Likely Null pointer can lead to Memory corruption ; | |||
bug_class: CWE-476: NULL Pointer Dereference; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please leave out the CWE.
vulns/CVE-2025-39838.yml
Outdated
memory_corruption: Likely Null pointer can lead to Memory corruption ; | ||
bug_class: CWE-476: NULL Pointer Dereference; | ||
Impact: Crash,memory leak; | ||
notes: Null Value is passed without checks leading to possible crash. CONFIG_CIFS needs to be enabled for exploitation ; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
notes: Null Value is passed without checks leading to possible crash. CONFIG_CIFS needs to be enabled for exploitation ; | |
notes: Null Value is passed without checks leading to possible crash. CONFIG_CIFS needs to be | |
enabled for exploitation |
vulns/CVE-2025-39838.yml
Outdated
reachability: Local | ||
memory_corruption: Likely Null pointer can lead to Memory corruption ; | ||
bug_class: CWE-476: NULL Pointer Dereference; | ||
Impact: Crash,memory leak; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Impact: Crash,memory leak; | |
Impact: Crash,memory leak |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please apply the comments for the file above to this one too.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please apply the comments for the file above to this one too.
Kernel CVES Analysis Sept25 2025